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BACKGROUND OF THE INVENTION 
[02] The present invention relates in general to a storage apparatus system for carrying out 

20 the copy (the remote copy) of data to another storage apparatus system which is located in an 
out-of-the-way place. More particularly, the invention relates to an information processing 
system for carrying out the remote copy which is of the type in which the order of writing 
data from a host computer to a storage apparatus system does not match the order of 
transmitting data from a storage apparatus system having the data written thereto to another 

25 storage apparatus system. 

[03] In an information processing system having a host computer and a plurality of storage 
apparatus systems, as the technology of carrying out the copy of data between the storage 
apparatus systems, there is known the remote copy. 

[04] By the remote copy is meant the technology in which a plurality of storage apparatus 
30 systems which are located physically apart from one another carry out the copy of the data, 
i.e., the double writing of the data between the storage apparatus systems without 
interposition of the host computer. 

[05] The storage apparatus system is a system including a plurality of storage apparatuses 
and a controller for controlling these storage apparatuses. 



[06] In the information processing system which carries out the remote copy, the storage 
apparatus systems which are respectively arranged in the places physically remote from one 
another are electrically connected to one another through dedicated lines or public lines. Of 
logical storage areas (hereinafter, referred to as "logical volumes", when applicable) which a 
5 certain storage apparatus system has, the logical volume having the same capacity as that of 
the logical volume subjected to the remote copy (hereinafter, referred to as "the source 
volume" for short, when applicable) is ensured in the storage apparatus system to which the 
source volume is copied. This ensured logical volume (hereinafter, referred to as "the 
destination volume", when applicable) is formed in such a way as to show one-to-one 
1 0 correspondence relation with the source volume. 

[07] The data of the source volume is copied to the destination volume through the 
associated one of the dedicated lines or public lines. 

[08] When the data contained in the source volume is updated, the updated data is 
transferred to the storage apparatus system having the destination volume through the 
15 associated one of the dedicated lines or the like and the updated data is also written to the 
destination volume corresponding to the source volume. 

[09] If the technique of the remote copy is employed, then in the information processing 
system having a plurality of storage apparatus systems, the logical volume of the same 
contents can be held in a plurality of storage apparatus systems. 

20 [10] The technique relating to the remote copy is disclosed in U.S. Patent No. 5,742,792. 
In U.S. Patent No. 5,742,792, the technique called the adaptive copy is further disclosed. 
[11] By the adaptive copy is meant one of the remote copy techniques. The adaptive copy 
is the remote copy method wherein before the data written from the host computer to the 
local storage device is copied to the remote storage device, the information exhibiting the 

25 completion of write is returned back to the host computer. 

[12] In the adaptive copy, the transmission order of data is not serialized, and hence the 
order of writing the data to the source volume by the host computer may be different from the 
order of transferring these data to the destination volume in some cases (hereinafter, such 
remote copy is referred to as the remote copy of "no guarantee to order", when applicable). 

30 [13] When the host computer writes repeatedly data to the same location in the destination 
volume on the basis of that property, only the data which has been written thereto lastly can 
be transmitted to the storage apparatus system having the destination volume. Therefore, the 
load on the network such as the dedicated line between the storage apparatus systems can be 
reduced. 
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[14] On the other hand, when the host computer in which the file system used in the so- 
called open system is incorporated writes the data to the storage apparatus system, in general, 
the buffer and the like provided in the host computer, whereby an instruction to transfer the 
data from an application program to the file system is made asynchronously with the 
5 operation of writing the data to the storage apparatus system. 

[15] But, in the case that the data in the file is destroyed due to various problems, in order 
to keep the coherency of the file system structure, with respect to at least the directory and the 
meta-data such as i-node which are used to manage the file system, the operation of issuing 
an instruction to transfer the data, i.e., the directory and the meta-data from the host computer 

10 to the storage apparatus system is carried out synchronously with issuing of the write 

command from the application program running on the host computer to the file system. The 
above-mentioned technique is disclosed in an article of "The Design and Implementation of a 
Log-Structured File System", Mendel Resenblum and John K. Ousterhout, ACM 
Transactions on Computer Systems, Vol. 10, No. 1, February 1992, page 29. 

15 [16] By executing such a processing, even if the data in the file which is buffered in the 

host computer is lost due to the asynchronous writing by an abrupt power source shutdown or 
the like, the meta-data is not lost at all. So, the coherency of the file system structure is kept 
and the damage can be kept to a minimum even though the data itself is lost. 



20 SUMMARY OF THE INVENTION 

[17] A storage system comprises first and second data storage systems. The first data 
storage system is configured to perform a copy operation of data that is stored in the first data 
system to the second data system. An intermediate volume is used in the first data system to 
store data received while performing an operation to produce an image of the main data 

25 volume of the first data system. The first and second data storage systems are further 
configured to provide failover processing if the first data storage system can no longer 
process storage access requests. The second data storage system can take over receiving and 
processing of storage access requests, and access the first data system to retrieve data that had 
not yet been copied over from the main volume. 

30 

BRIEF DESCRIPTION OF THE DRAWINGS 
[18] Aspects, advantages and novel features of the present invention will become apparent 
from the following description of the invention presented in conjunction with the 
accompanying drawings, wherein: 



3 



Fig. 1 is a block diagram showing a configuration of a computer system to 
which a first embodiment of the present invention is applied; 

Fig. 1 A illustrates a variation of the embodiment shown in Fig. 1 as used in a 
failover configuration; 

5 Figs. 2A to 2C are respectively schematic views useful in explaining the flow 

of the data in the first embodiment; 

Fig. 3 is a block diagram showing an internal configuration of a DKC; 
Fig. 4 is a flow chart useful in explaining the write processing in the first 

embodiment; 

10 Fig. 5 is a flow chart useful in explaining the main remote copy processing in 

the first embodiment; 

Fig. 6 is a flow chart useful in explaining the sub-remote copy processing in 
the first embodiment; 

Fig. 7 is a flow chart useful in explaining the main freezing processing in the 
1 5 first embodiment; 

Fig. 8 is a flow chart useful in explaining the sub-freezing processing in the 
first embodiment; 

Fig. 9 is a flow chart useful in explaining the sub-recovery processing in the 
first embodiment; 

20 Fig. 10 is a flow chart useful in explaining the reading processing in the first 

embodiment; 

Fig. 1 1 is a schematic view useful in explaining the flow of the freeze 
instruction corresponding to the first embodiment; 

Fig. 12 is a block diagram showing a configuration of a computer system to 
25 which a second embodiment of the present invention is applied; 

Figs. 13 A to 13D are respectively schematic views useful in explaining the 
flow of the data in the second embodiment; 

Fig. 14 is a schematic view useful in explaining the flow of a freeze 
instruction in the second embodiment; 
30 Fig. 15 is a flow chart useful in explaining the write processing A in the 

second embodiment; 

Fig. 16 is a flow chart useful in explaining the main freezing processing A in 
the second embodiment; 
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Fig. 17 is a flow chart useful in explaining the sub-remote copy processing A 
in the second embodiment; 

Fig. 18 is a flow chart useful in explaining the sub-freezing processing A in 
the second embodiment; 
5 Fig. 19 is a block diagram showing a configuration of a computer system to 

which a third embodiment of the present invention is applied; 

Figs. 20A to 20D are respectively schematic views useful in explaining the 
flow of the data in the third embodiment; 

Fig. 21 is a schematic view useful in explaining the flow of a freeze 
10 instruction in the third embodiment; 

Fig. 22 is a flow chart useful in explaining the main write processing B in the 
third embodiment; 

Fig. 23 is a flow chart useful in explaining the main freezing processing B in 
the third embodiment; 

15 Fig. 24 is a flow chart useful in explaining the main copy processing B in the 

third embodiment; 

Fig. 25 is a flow chart useful in explaining the main remote copy processing B 
in the third embodiment; 

Fig. 26 is a flow chart useful in explaining the main freezing completion 
20 processing in the third embodiment; 

Fig. 27 is a flow chart useful in explaining the sub-freezing processing in the 
third embodiment; and 

Fig. 28 is a flow chart useful in explaining the sub-remote copy processing B 
in the third embodiment. 

25 

DESCRIPTION OF THE SPECIFIC EMBODIMENTS 
[19] The preferred embodiments of the present invention will hereinafter be described in 
detail with reference to the accompanying drawings. 

[20] Fig. 1 is a block diagram showing a configuration of a first embodiment of a computer 
30 system 1000 to which the present invention is applied. 

[21] The computer system 1000 includes a host computer 1010, a main storage apparatus 
system 1 180, a substorage apparatus system 1 190 for carrying out the remote copy between 
the main storage apparatus system 1 180 and the sub-storage apparatus system 1 190, a sub- 
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host computer 1020 and a network 1050 through which the main storage apparatus system 
1180 and the sub-storage apparatus system 1190 are linked to each other, 
[22] The substorage apparatus system 1 190 is used when the main storage apparatus 
system 1 180 becomes unusable due to the calamity or the like. The sub-host computer 1020, 
5 when the host computer 1010 or the main storage apparatus system 1 180 becomes unusable, 
takes over the processing which the host computer 1010 is expected essentially to execute, 
using the data in the sub-storage apparatus system 1 190. 

[23] For the network 1050, it is assumed that it is the shared network such as the Internet, 
and the transfer rate of the data is not so high. In the present embodiment, it is assumed that 
1 0 the remote copy between the main storage apparatus system 1180 and the substorage 

apparatus system 1 190 is carried out with the no guarantee to order while no heavy load is 
applied to the network 1050. By the way, the data transfer rate of the network 1050 may be 
high as well. 

[24] The main storage apparatus system 1 180 includes a main disk unit 1 130 in which the 
15 data transferred from the host computer 1010 is stored, and a main disk controller 1030 

(hereinafter, referred to as "a DKC" for short, when applicable) for controlling the main disk 
unit 1130. 

[25] In the present embodiment, the host computer 1010 issues an instruction to the main 
storage apparatus system 1 1 80 in such a way as to carry out "a freezing operation" 

20 (hereinafter, referred to as "the freeze instruction" when applicable). 

[26] The meaning of "freezing" is to hold, for the substorage apparatus system 1 190, the 
same volume image as that of the main storage apparatus system 1 1 80 at a time point when 
the host computer 1010 has issued the instruction. Thus, when the host computer 101 issues 
a freeze instruction, a volume image of the main storage apparatus system 1 180 is produced 

25 on the substorage apparatus system 1 190. 

[27] The main disk unit 1 130 includes a main volume 1 120 and a main differential volume 
1 140. Each of the main volume and the main differential volume may be either the logical 
volume or the physical volume. In the case of the logical volume, as in the present 
embodiment, a plurality of volumes may be present in the main disk unit in some cases. On 

30 the other hand, in the case of the physical volume, the main disk unit further includes a 

plurality of disk units each of which constitutes the physical volume. In addition, in the case 
as well of the logical volume, the main disk unit may be constituted by a plurality of disk 
units. 
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[28] In the main volume 1 120, there is stored the data which has been transferred from the 
host computer 1010 to the main storage apparatus system 1180. 

[29] In the main differential volume 1 140, for a time period ranging from a time point 
when the main storage apparatus system 1 180 has received the freeze instruction from the 
5 host computer 1010 up to a time point when the processing of the freezing has been 

completed (hereinafter, such a time period is referred to as "in the freezing" for short, when 
applicable), there is stored the data which has been transferred from the host computer 1010. 
[30] The main DKC 1030 has a main freezing mode 1060, a main bitmap 1070 and a main 
differential bitmap 1080 on the memory. 
10 [31] The main freezing mode 1060 shows whether or not the main DKC 1030 itself is 

executing the process of freezing. For example, if it is determined that the main DKC 1030 
itself is processing the freeze instruction, then the mode becomes 1 . 

[32] The main bitmap 1070 and the main differential bitmap 1080 have the respective bits 
each corresponding to a block which the main volume 1 120 has. 

1 5 [33] The main bitmap 1070 shows the blocks in the main volume 1 120. These blocks are 
the data, which are not yet transferred to the sub-DKC 1040, among the data stored in the 
main volume 1 120 before the main storage apparatus system 1 180 receives the freeze 
instruction from the host computer 1010. In other words, main bitmap 1070 identifies the 
blocks in main volume 1 120 which have not been copied to sub-DKC 1040 at the time a 

20 freeze instruction is received. 

[34] The main differential bitmap 1080 shows the blocks which contain the data which the 
main disk unit 1 130 has received from the host computer 1010 while the main DKC 1030 is 
executing the process of the freezing. 

[35] The data is stored in the log-structured postscript type file format in the main 
25 difference volume 1 140. The block numbers exhibiting corresponding blocks in the main 
volume 1 120 are also contained in the stored data. 

[36] In the case where the write data to be written to the main volume 1 120 is received 
while the main DKC 1030 is executing the process of the freezing, the main DKC 1030 
checks the main differential bitmap 1080. When the write data to be written has already been 
30 present in the main differential volume 1 140, the data which was written to the main 

differential volume 1 140 prior thereto is cancelled in such a way that a plurality of data 
written to the same block are not present in the main differential volume 1 140. 
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[37] The substorage apparatus system 1 190 includes a sub-disk unit 1 160 in which the data 
which has been remote-copied from the main storage apparatus system 1 180 is stored, and a 
sub-DKC 1040 for controlling the sub-disk unit 1 160. 

[38] The sub-disk unit 1 160 includes a sub-volume 1 150, a sub-differential volume A 1 170 
5 and a subdifferential volume B 1 175. 

[39] In the sub-volume 1 1 50, there is stored the volume image of the main volume 1 120 at 
a certain time point, more specifically, at a time point when the host computer 1010 
previously issued the freeze instruction to the main storage apparatus system 1 180; i.e., 
during the time of processing the freeze instruction. The blocks of the sub- volume 1 150 and 

1 0 the main volume 1 120 show one-to-one correspondence. 

[40] In the sub-differential volume A 1 1 70, there is stored the data which was written to 
the main storage apparatus system 1 180 on and after the host computer 1010 previously 
issued the freeze instruction to the main storage apparatus system 1 180. 
[41] The sub-DKC 1040 includes a sub-freezing mode 1090, a sub-bitmap 1 100 and a sub- 

1 5 differential bitmap 1 1 1 0 on a memory (not shown). 

[42] The value of the sub-freezing mode 1090 becomes zero when the sub-DKC 1040 does 
not execute the process of the freezing, and becomes 1 or 2 when the sub-DKC 1040 is 
executing the process of the freezing. 

[43] The sub-bitmap 1 100 and the sub-differential bitmap 1 1 10 are constituted with the 
20 same number of bits as the number of blocks which the sub-volume 1 150 has, and 1 bit 
corresponds to 1 block. 

[44] The sub-bitmap 1 100 shows the presence or absence of the data which is stored in the 
subdifferential volume A 1 170. 

[45] The sub-differential bitmap 1110 shows the presence or absence of the data which is 

25 stored in the sub-differential volume B 1 175. 

[46] The data is respectively stored in the log-structured type file format in the sub- 
differential volume A 1 170 and the sub-differential volume B 1 175 similarly to the main 
differential volume 1 140. The block numbers exhibiting the corresponding blocks in the sub- 
volume 1 150 are also contained in the data which is respectively stored therein. 

30 [47] The sub-DKC 1040 executes the same processing as that in the main DKC 1030 to 
cancel the old data in such a way that two or more data corresponding to the same block is 
not present in the sub-differential volume A 1 170 and the sub-differential volume B 1175. 
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[48] While in the present embodiment, the host computer 1010 issues the freeze 
instruction, alternatively, the main DKC 1030 or the sub DKC 1040 may issue the freeze 
instruction. 

[49] The application program which runs on the host computer 1010 issues an instruction 
5 to write data to the main storage apparatus system 1 1 80. But, in actuality, there may be the 
case where the data is written to the cache or buffer memory of the host computer 1010 and 
hence the contents of the data stored in the main storage apparatus system 1 180 become the 
state which the application program does not intend (i.e., the data which ought to have been 
written is not yet written in actual). 
1 0 [50] If under this state, the host computer 1 0 1 0 has gone down due to a shutdown of the 
power source, and the file system recovery program such as fsck is executed for the main 
storage apparatus system 1 180, then there is the possibility that the data which is not reflected 
in the main storage apparatus system 1 180 may be lost. 

[51] In order to prevent the data which is not reflected in the main storage apparatus 
15 system 1 180 from being lost, the main DKC 1030 or the like should not issue freely the 

instruction for the freezing, but the instruction for the freezing should be issued after the host 
computer 1010 has written all of the unreflected data on the cache or buffer memory to the 
main storage apparatus system 1 180. 

[52] Figs. 2A to 2C show the flow of the data in the present embodiment. 

20 [53] Fig. 2A is a schematic view showing the flow of the data in the state in which the host 
computer 1010 has not yet issued the freeze instruction, i.e., in the normal state. 
[54] The data which has been sent from the host computer 1010 is written to the main 
volume 1 120 (indicated by an arrow A 100). The data which has been newly written to the 
main volume 1 120 is read out from the main volume 1 120 to the main DKC 1030 to be 

25 transferred to the sub-DKC 1040 to be written to the sub-differential volume A 1 170 
(indicated by an arrow B 110). 

[55] At an arbitrary time point in Fig. 2 A, in the sub-volume 1 150, there is stored the same 
volume image as that of the main volume 1 120 at a time point when the host computer 1010 
issued the freeze instruction last time. 
30 [56] Fig. 2B is a schematic view showing the flow of the data from a time point after the 
host computer 1010 issues the freeze instruction up to a time point when the main DKC 1030 
issues a notification command reporting that all of the data has been sent (hereinafter, 
referred to as "all freezing data transmission completion", when applicable) to the sub-DKC 
1040. 
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[57] If the data sent from the host computer 1010 is to be stored in a block of the main disk 
unit 1 130 that was already sent to the sub-DKC 1040 at the time when the host computer 
1010 issued the freeze instruction, then the data is written to the main volume 1 120 as 
indicated by arrow CI 20. On the other hand, if the data sent from the host computer 1010 is 
5 to be stored in a block which is holding data that has not yet been sent to the sub-DKC 1040, 
then that data is written to the main differential volume 1 140, as indicated by arrow D130. 
[58] Data in a block in the main volume 1 120 which has not yet been sent to the sub-DKC 
1040 at the time the freeze instruction was issued is read out from the main volume 1 120 to 
the main DKC 1030. The data is then transferred to the sub-DKC 1040 to be written to the 

10 sub-differential volume A 1 170, as indicated by arrow E140. 

[59] The main DKC 1030, in accordance with the contents of the main bitmap 1070, 
transfers all of the difference data between the main volume 1 120 and the sub-volume 1 150 
at a time point when the freeze instruction issued from the host computer 1 010 to the sub- 
differential volume A 1 170. After completion of all of the transfers, the main DKC 1030 

15 informs the sub-DKC 1040 that all of the freezing data has been transferred. 

[60] At an arbitrary time point in Fig. 2B, in the sub-volume 1 150, there is stored the 
volume image having the same contents as those of the volume image which the main 
volume 1 120 held at a time point when the host computer 1010 issued the instruction for the 
freezing last time. 

20 [61] Fig. 2C is a schematic view showing the flow of the data from a time subsequent to 
when the main DKC 1030 informs the sub-DKC 1040 that all of the freezing data has been 
transferred. As will be explained, the main DKC 1030 updates the data stored in the main 
volume 1 120 using the data stored in the main differential volume 1 140. Also, the sub-DKC 
1040, using the data stored in the sub-differential volume A 1 170, updates the data which is 

25 stored in the sub-volume 1 1 50. Data from the host computer 1010 is now written to the main 
volume 1 120, as indicated by an arrow F150. 

[62] Data stored in the main volume 1 120 is updated based on data which is stored in the 
main differential volume 1 140, as indicated by an arrow G160. But, in the case where the 
block containing the data becoming an object of the update is already updated the data which 
30 has been transferred from the host computer 1010, the update of the data in the main volume 
1 120 corresponding to the data stored in the main differential volume 1 140 is not carried out. 
Thus, any blocks written by the host computer 1010 after all the freezing data has been 
transferred to sub-DKC 1040 will not be updated from the main differential volume 1 140, 
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because the data from the host computer 1010 is more recent that the corresponding data in 
main differential volume 1 140. 

[63] The data which has been transferred from the host computer 1010 to the main disk 
unit 1 130 after the freeze instruction from the host computer 1010 is read out from the main 
5 volume 1 120 to the main DKC 1030 to be sent to the sub-DKC 1040 to be stored in the sub- 
differential volume B 1 175, as indicated by an arrow HI 70. Thus, copying of data to the sub- 
storage apparatus system 1 190 resumes, this time with sub-differential volume B 1 175 being 
the receiving volume, instead of sub-differential volume 1 1 70. 

[64] The sub-DKC 1040 reads out the data in the sub-differential volume A 1 170 to the 
10 sub-DKC 1040 to store that data in the sub-volume 1 150, as indicated by an arrow 1180. At 
an arbitrary time point in Fig. 2C, the data stored in the sub-volume 1 150 is combined with 
the data stored in the sub-differential volume A 1 170, whereby the volume image of the main 
volume 1 120 at a time point when the host computer 1010 issued the freeze instruction to the 
main DKC 1030 that time is reproduced. In other words, sub-volume 1 150 contains a 
15 volume image representing the data state of main volume 1 120 at the time the freeze 
instruction was issued. 

[65] From the foregoing, in Figs. 2 A and 2B, the data of the volume image having the 
same contents as those of the data of the volume image of the main disk unit 1 120 at a time 
point when the freeze instruction was issued by the host computer 1010 last time is present in 

20 the sub-volume 1 150. In Fig. 2C, the data of the volume image having the same contents as 
those of the data of the volume image in the main disk unit 1 120 at a time point when the 
freeze instruction was issued at that time can be reproduced by combining the data stored in 
the sub-volume 1 150 with the data in the sub-differential volume A 1 170. 
[66] In other words, in any case, the volume images which are coherent with the volume 

25 images of the main disk unit 1 120 at a time point when the host computer 1010 issued the 
freeze instruction is prepared in the sub-disk unit 1 160. 

[67] Fig. 1 A shows an embodiment of the invention configured for failover (also referred 
to as takeover) mode of operation. In this configuration, host computer 1010 can be 
configured to be a server to provide data storage services for a storage facility where main 
30 storage apparatus system 1 180 serves as primary storage. Sub-storage apparatus system 1 190 
can be configured as a secondary storage facility. Host computer 1010 receives storage 
access requests from users. User requests are typically made via the users' client systems 
which are in communication wit the host computer over suitable communication paths. The 
primary storage facility can provide failover recovery capability by performing remote copy 
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operations with the secondary storage facility in the manner discussed in conjunction with 
Fig. 1. 

[68] A communication path 1015 can be provided between host computer 1010 and sub- 
host computer 1020 to initiate failover recovery in the event that the host computer becomes 
5 unavailable. In this configuration, user requests are provided to both host computer 1010 and 
sub host computer 1020. However, at any one time only one computer (1010, 1020) responds 
to user requests for storage access. Thus, initially, user requests are handled by host 
computer 1010. In the event of a failure (catastrophic or otherwise) in host computer 1010, 
failover to sub-host computer 1020 is performed, at which time user requests are serviced by 
10 sub-host computer 1020. The communication path 1015 allows host 1010 to initiate an 
appropriate failover sequence with sub-host 1020. Sub-host 1020 then takes over as the 
server for the storage facility. 

[69] After taking over, sub-host 1020 appropriately signals DKC 1040 to operate in a 
failover mode. In the failover mode, DKC 1040 can access data that has not yet been copied 
15 from main volume 1 120 and main differential volume 1 140 to sub-storage apparatus system 
1 190. A communication path 1051 can be provided between DKC 1 140 and DKC 1 130 to 
perform the necessary handshaking to effect the data access. DKC 1 140 can determine which 
blocks have been copied and which blocks have not been copied based on the sub-bit map 
1 1 00. Data transfer can be provided between a data path 1 053. As can be seen the paths 

4 

20 1051 and 1053 can be provided over communication network 1050, or via a link that is 
separate from network 1050. 

[70] Thus, when a user reads or writes data that has already been copied to the sub-storage 
apparatus system 1 190, the request can be fulfilled by the sub-storage apparatus system. If a 
read or write request is made on data that has not yet been copied from main storage 

25 apparatus system 1 1 80, then the data block is copied from main storage apparatus system 
1 180 to sub-differential volume A 1 170 before processing the request. Over time, all the 
blocks will be copied over from main storage apparatus system 1 1 80 to sub-differential 
volume A 1 170. At that time, an image of main volume 1 120, including data that was 
received during freeze processing and stored on main differential volume 1 140, will be 

30 contained in the sub-differential volume. The image in sub-differential volume A 1 170 can 
then be copied to sub-volume 1 150, and subsequent accesses can be made entirely from the 
sub-volume. 

[71] Fig. 3 is a block diagram of the main DKC 1030. 
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[72] The main DKC 1030 includes a host interface 1210, a drive interface 1230, a network 
interface 1220, a CPU 1240, a ROM 1250, a RAM 1260, and a direct memory access 
controller 1270. 

[73] The program which runs on the CPU 1240 is stored in the ROM 1250. 
5 [74] The main freezing mode 1060, the main bitmap 1070, and the main differential 
bitmap 1080 are stored in the RAM 1260. The RAM is also used as the cache memory. 
[75] The CPU 1240 controls the main storage apparatus 1 180. In the CPU 1240, a 
multitask operating system is running, so a write processing 2000, a main freezing processing 
2600 and the like can be processed in parallel with one another. 
1 0 [76] The sub-DKC 1 040 has also the same configuration as that of the main DKC 1 030. 
But, in the sub-DKC 1040, the host interface 1210 is electrically connected to the sub-host 
computer 1020, and the drive interface 1230 is electrically connected to the sub-disk 1 160. 
In the RAM 1260, the sub-freezing mode 1090, the sub-bitmap 1 100 and the sub-differential 
bitmap 1 1 10 are stored. 

15 [77] Fig. 4 is a flow chart of the write processing 2000 which is executed in the main DKC 
1030 when the host computer 1010 sends the write command to write data and the data to be 
written (hereinafter, referred to as "the write data" for short, when applicable) to the main 
storage apparatus system 1180. 

[78] The main DKC 1030 receives the write data through the host interface 1210 (Step 
20 2010) to judge whether or not the main freezing mode 1060 stored in the RAM 1260 is in the 
ON state (Step 2020). 

[79] If it is determined in Step 2020 that the main freezing mode 1060 is in the OFF state, 
then the main DKC 1030 sets to 1 the bit of the main bitmap 1070 corresponding to the block 
having the main volume 1 120 to which the write data received by the main DKC 1030 is 

25 written (Step 2030). 

[80] The main DKC 1030 controls the main disk unit 1 1 30 in such a way that the write 
data is written to the main volume 1 120 (Step 2040). The main DKC 1030 itself judges 
whether or not a main remote copy processing 2200 is being executed (Step 2050). If it is 
determined in Step 2050 that the main remote copy processing 2200 is not being executed, 

30 then the remote processing is completed after the main DKC 1030 has executed the main 
remote copy processing 2200. On the other hand, if it is determined in Step 2050 that the 
main remote copy processing 2200 is being executed, then the write processing 2000 is 
completed. 
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[81] If it is determined in Step 2020 that the main freezing mode 1060 is in the ON state, 
then the main DKC 1030 judges whether or not the bit of the main bitmap 1070 
corresponding to the block to which the received write data is to be written is 1 (Step 2060). 
If it is determined in Step 2060 that the corresponding bit is zero, then the processing in Step 
5 2030 is executed. On the other hand, if it is determined in Step 2060 that the corresponding 
bit is 1, then the bit of the main differential bitmap 1080 corresponding to the block in the 
main volume 1 120 in which the received write data is to be stored is set to 1 (Step 2070). 
[82] The main DKC 1030 controls the main disk unit 1 130 in such a way that the block 
number information in the main volume 1 120 is added to the received write data, and then the 
10 write data is written to the main differential volume 1 140 (Step 2080). Thereafter, the 
processing in Step 2050 is executed. 

[83] Fig. 5 is a flow chart in explaining a main remote copy processing 2200 which the 
main DKC 1030 executes. 

[84] The main remote copy processing 2200 is the processing which is called from the 
1 5 above-mentioned write processing 2000 and from the main freezing processing 2600 which 
will be described later. 

[85] The main DKC 1030 judges whether or not the corresponding bit of the main bitmap 
1070 is 1 and also whether or not the block which contains the data stored in the RAM 1260 
is present in the main volume 1 120 (Step 2230). If it is determined in Step 2230 that the 
20 block corresponding to the condition is present therein, then the main DKC 1030 specifies the 
block of interest to execute the processing in Step 2260. 

[86] On the other hand, if it is determined in Step 2230 that the block corresponding to the 
condition is absent, then the main DKC 1030 judges whether or not the bit of 1 is present in 
the main bitmap 1070 (Step 2240). If it is determined in Step 2240 that the bit of 1 is not 

25 present in the main bitmap 1070, then the main remote copy processing 2200 is completed. 
[87] On the other hand, if it is determined in Step 2240 that the bit of 1 is present in the 
main bitmap 1070, then the main DKC 1030 specifies the block corresponding to the bit of 1 
in the main bitmap 1070 to read out the data in the block thus specified from the main volume 
1 120 to store the data thus read out in the RAM 1260 (Step 2250). 

30 [88] The main DKC 1030 makes zero the bit of the main bitmap 1070 corresponding to the 
specified block (Step 2260). The main DKC 1030 transfers the data, which has been read 
out, to the sub-DKC 1040 through the network interface 1220 (Step 2270). 
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[89] After having received the report, from the sub-DKC 1040, that the sub-DKC 1040 
received the data of interest (Step 2280), the main DKC 1030 returns back to the processing 
in Step 2230. 

[90] Fig. 6 is a flow chart useful in explaining a sub-remote copy processing 2400 which 
5 the sub-DKC 1040 executes at the time when the main DKC 1030 has sent the data to the 
sub-DKC 1040. 

[91] The sub-DKC 1040 receives the data which has been sent from the main DKC 1030 
through the network interface 1220 (Step 2410), and then transmits the report exhibiting the 
reception of the data to the main DKC 1030 (Step 2420). 
1 0 [92] The sub-DKC 1 040 judges whether or not the value of the sub-freezing mode 1 090 
stored in the RAM 1260 is 2 (Step 2430), and if it is determined in Step 2430 that the value 
of interest is not 2, controls the sub-disk unit 1 160 in such a way that the received data is 
written to the sub-differential value A 1 170 (Step 2440). 

[93] The sub-DKC 1040 makes 1 the bit of the sub-bitmap 1 100 corresponding to the 
15 block having the written data to complete the sub-remote processing 2400 (Step 2450). 

[94] On the other hand, if it is determined in Step 2430 that the value of the sub-freezing 
mode 1090 is 2, then the sub-DKC 1040 controls the sub-disk unit 1 160 in such a way that 
the received data is written to the sub-differential value B 1 175 (Step 2460). 
[95] The sub-DKC 1040 sets to 1 the bit of the sub-differential bitmap 1110 corresponding 
20 to the block having the written data to complete the sub-remote copy processing 2400 (Step 
2470). 

[96] Fig. 7 is a flow chart useful in explaining a main freezing processing 2600 which the 
main DKC 1030 executes at the time when the host computer has issued the freeze 
instruction. 

25 [97] After having received the freeze instruction from the host computer 1010 through the 
host interface 1210, the main DKC 1030 turns ON the main freezing mode 1060 which is 
stored in the RAM 1260 (Step 2610). 

[98] The main DKC 1030 transmits the freeze instruction to the sub-DKC 1040 (Step 
2620). The main DKC 1030 judges whether or not the main DKC 1030 itself is executing the 
30 remote copy processing 2200 (Step 2625). 

[99] If it is determined in Step 2625 that the main DKC 1030 itself is executing the remote 
copy processing 2200, then the main DKC 1030, after having carried out the step of waiting 
for some time (e.g., several milliseconds) (Step 2635), executes the processing in Step 2640. 
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[100] On the other hand, if it is determined in Step 2625 that the main DKC 1030 itself is 
not executing the remote copy processing 2200, then the main remote copy processing 2200 
is executed (Step 2630) to execute the processing in Step 2640. 

[101] In Step 2640, the main DKC 1030 judges whether or not all of the bits of the main 
5 bitmap 1070 are zero. If the bit exhibiting 1 is present in the main bitmap 1070, then since 
the data to be sent to the sub-DKC 1040 still remains in the main disk unit 1 130, the main 
DKC 1030 executes again the processings after Step 2625 until all of the bits of the main 
bitmap 1070 have become zero. 

[102] On the other hand, if it is determined in Step 2640 that all of the bits of the main 
10 bitmap 1070 are zero, then the main DKC 1030 transmits the information, that the freezing 
data has already been transmitted, to the sub-DKC 1040 (Step 2650). 
[103] The main DKC 1030 judges whether or not all of the values of the main differential 
bitmap 1080 are zero (Step 2660). 

[104] If it is determined in Step 2660 that all of the values of the main differential bitmap 
1 5 1080 are not zero, then the main DKC 1030 controls the main disk unit 1 130 in such a way 
that the data of the block, in which the bit in the main differential bitmap 1080 is 1, is read 
out from the main differential volume 1 140 (Step 2670) to be written to the block to which 
the main volume 1 120 corresponds (Step 2680). 

[105] The main DKC 1030 sets to zero the bit of the main differential bitmap 1080 
20 corresponding to the block containing the written data (Step 2690), while it sets to 1 the 

corresponding bit of the main bitmap 1070 to return back to the processing in Step 2660 (Step 
2695). 

[106] On the other hand, if it is determined in Step 2660 that all of the values of the main 
differential bitmap 1080 are zero, then the main DKC 1030 waits for the completion report 

25 from the sub-DKC 1040 (Step 2700). After having received the completion report 

transmitted from the sub-DKC 1040 (Step 2710), the main DKC 1030 turns OFF the main 
freezing mode 1060 which is stored in the RAM 1260 (Step 2720) to transmit a signal 
exhibiting the freezing processing completion report to the host computer 1010 to complete 
the main freezing processing 2600 (Step 2730). 

30 [107] Upon completion of the processing in Step 2650, the processing in Step 2700 may be 
executed, and the update processing for the main differential volume (Steps 2660 to 2695) 
may be executed after completion of the main freezing processing. 
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[108] Fig. 8 is a flow chart useful in explaining a sub-freezing processing 2800 which the 
sub-DKC 1040 executes at the time when the main DKC 1030 has issued the freeze 
instruction to the sub-DKC 1040. 

[109] After having received the freeze instruction command from the main DKC 1030, the 
5 sub-DKC 1040 sets to 1 the sub-freezing mode 1090 which is stored in the RAM 1260 (Step 
2810) to wait for the report, exhibiting that all of the freezing data has already been 
transmitted, from the main DKC 1030 (Step 2820). 

[110] After having received the report exhibiting the completion of the transmission of all 
of the freezing data from the main DKC 1030, the sub-DKC 1040 sets to 2 the sub-freezing 
10 mode 1090 (Step 2825). 

[Ill] The sub-DKC 1 040 judges whether or not the corresponding bit of the sub-bitmap 
1 100 stored in the RAM 1260 is 1 and also whether or not the corresponding block having 
the data is present on the RAM 1260 (Step 2830). 

[112] If it is determined in Step 2830 that the corresponding block is present on the RAM 
15 1260, then the sub-DKC 1040 executes the processing in Step 2860. On the other hand, if it 
is determined in Step 2830 that the corresponding block is not present on the RAM 1260, 
then it is determined whether or not the block in which the corresponding bit of the sub- 
bitmap 1 100 is 1 is present (Step 2840). 

[113] If it is determined in Step 2840 that the block in which the corresponding bit of the 
20 sub-bitmap 1 100 is 1 is present, then the sub-DKC 1040 reads out the data corresponding to 
the bit as 1 from the sub-differential volume A 1 170 to the RAM 1260 (Step 2850) to write 
the data of interest to the block of the sub-volume 1 150 corresponding to the data read to the 
RAM 1260 (Step 2860). 

[114] The sub-DKC 1040 sets to zero the bit of the sub-bitmap 1 100 corresponding to the 
25 data which has already been written (Step 2870) to return back to the processing in Step 
2830. 

[115] On the other hand, if it is determined in Step 2840 that the block in which the 
corresponding bit of the sub-bitmap 1 100 is 1 is absent, then the sub-DKC 1040 sets to zero 
the sub-freezing mode 1090 (Step 2880) to transmit the report exhibiting the completion of 
30 the sub-freezing processing to the main DKC 1030 (Step 2890) to complete the sub-freezing 
processing 2800. 

[116] Fig. 9 is a flow chart useful in explaining a sub-recovery processing 3000 which the 
sub-DKC 1040 executes in accordance with the instruction from the sub-host computer 1020 
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in the case where the host computer 1010 and the main storage apparatus 1 180 become both 
unusable at all due to a disaster or the like. 

[117] After having received the instruction issued from the sub-host computer 1020, the 
sub-DKC 1040 judges whether or not the sub-freezing mode 1090 is 1 (Step 3010). If it is 
5 determined in Step 1040 that the sub-freezing mode 1090 is 1, then the sub-DKC 1040 

suspends the sub-freezing processing 2800 which the sub-DKC 1040 itself is executing (Step 
3040) to set to zero the sub-freezing mode (Step 3050). 

[118] The sub-DKC 1040 initializes all of the values of the sub-differential bitmap to zero 
(Step 3060) to erase the information which the sub-differential volume A 1 170 and the sub- 
10 differential volume B 1 175 have (Step 3070). 

[119] The sub-DKC 1040 transmits the completion report to the sub-host computer 1020 
(Step 3080) to complete the sub-recovery processing 3000. 

[120] On the other hand, if it is determined in Step 3010 that the sub-freezing mode 1090 is 
not 1, then the sub-DKC 1040 judges whether or not the sub-freezing mode 1090 is zero 
15 (Step 3020). If it is determined in Step 3020 that the sub-freezing mode 1090 is zero, then 
the sub-DKC 1040 executes the processing in Step 3060. On the other hand, if it is 
determined in Step 3020 that the sub-freezing mode 1090 is not zero, then the sub-DKC 1040 
waits for the sub-freezing mode 1090 to become zero to execute the processing in Step 3020 
(Step 3030). 

20 [121] By executing the sub-recovery processing 3000, the volume image of the main 

volume 1 120 at a time point when the freeze instruction was issued from the host computer 
1010 to the main DKC 1030 last time or this time is copied to the sub- volume 1 150. Then, 
the sub-host computer 1020 can use freely the copied volume image. 
[122] Fig. 10 is a flow chart useful in explaining a read processing 3200 which the main 

25 DKC 1030 executes at the time when the host computer 1010 has issued the read command to 
read the data to the main storage apparatus system 1 180. 

[123] After having received the read command issued from the host computer 1010, the 
main DKC 1030 judges whether or not the data which has been requested from the host 
computer 1010 is present in the RAM 1260 (Step 3205). 
30 [124] If it is determined in Step 3205 that the requested data is not present in the RAM 
1260, then the main DKC 1030 checks the main freezing mode (Step 3210). If it is 
determined in Step 3210 that the main freezing mode 1060 is OFF, then the main DKC 1030 
reads out the requested data from the main volume 1 130 (Step 3220) to transfer the data of 
interest to the host computer 1010 to complete the read processing 3200 (Step 3230). 
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[125] On the other hand, if it is determined in Step 3210 that the main freezing mode 1060 
is ON, then the main DKC 1030 judges whether or not the bit of the main differential bitmap 
1080 corresponding to the data requested from the host computer 1010 is 1 (Step 3240). 
[126] If it is determined in Step 3240 that the corresponding bit is zero, then the main DKC 
5 1030 executes the processing in Step 3220. On the other hand, if it is determined in Step 
3240 that the corresponding bit is 1, then the main DKC 1030 finds out the data, which has 
been required from the host computer 1010, from the main differential volume 1 140 to read 
out the data thus found out to execute the processing in Step 3230 (Step 3250). 
[127] On the other hand, if it is determined in Step 3205 that the requested data is present in 

10 the RAM 1260, then the main DKC 1030 executes the processing in Step 3230. 

[128] Fig. 1 1 is a schematic view useful in explaining the transmission and the reception of 
the freeze instruction between the apparatuses included in the host computer 1000. 
[129] In Fig, 1 1, the vertical axis represents the time base. Thus, it is meant that the time 
elapses as the position on the drawing is located more downwardly. 

15 [130] The host computer 1010 issues the freeze instruction to the main DKC 1030, and then 
in response to the freeze instruction issued thereto, the main DKC 1030 issues the freeze 
instruction to the sub-DKC 1040. 

[131] After having transferred the volume image of the main volume 1 120 at a time point of 
the reception of the freeze instruction to the sub-DKC 1040, the main DKC 1030 transmits 
20 the report showing the completion of the transfer of all of the freezing data to the sub-DKC 
1040. 

[132] The sub-DKC 1040 reflects the data of the main volume 1 120 at a time point of the 
issue of the freeze instruction to the sub-volume 1 150, and after completion of the reflection 
of the data, informs the main DKC 1030 of the completion of the freezing. In response 
25 thereto, the main DKC 1030 informs the host computer 1010 of the completion of the 
freezing. 

[133] By adopting the configuration of the present embodiment, the data which is held in 
the main disk unit at a time point when the freeze instruction is issued from the host computer 
1010 can be held in the sub-disk unit, and hence even when the data is destroyed, the loss of 
30 the data can be suppressed to a minimum. 

[134] In other words, the sub-storage apparatus system 1 190 holds the data at a time point 
of the issue of the freeze instruction and at the same time, holds as the differential data the 
data which was written on and after that time point. This freezing is carried out at periodic 
intervals, whereby when the data of the main storage apparatus system 1 180 is not able to be 
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used due to for some cause or other, all of the data at a time point when it was frozen last 
time can be obtained from the sub-storage apparatus system 1 190. 

[135] In this connection, while in the present embodiment, the description has been given 
on the assumption that a plurality of volumes are present inside of the main disk unit 1130, 
5 the present invention is not intended to be limited thereto. That is, a plurality of disk units 
may be present in the main storage apparatus system 1 1 80, and each of the disk units may 
take the function of the volume on itself. This is also applied to the sub-disk unit 1 160. 
[136] Fig. 12 is a block diagram showing a configuration of a second embodiment of the 
computer system 1000 to which the present invention is applied. 
10 [137] A point of difference of the present embodiment from the first embodiment is that the 
copy of the coherent volume image at the time when the freeze instruction has been issued 
from the host computer 1010 is generated in the main disk unit 1 130 once, and the data is 
transferred from the volume thus generated to the sub-DKC. 

[138] The present embodiment is also different from the first embodiment in that two 
15 volumes are prepared for the sub-storage apparatus system, and one of them is made the 
volume which is used in order to generate the coherent volume. 

[139] The description will hereinafter be given with respect to points of difference from the 
computer system 1000 of the first embodiment. The parts which will not be described here 
have the same configurations as those of the first embodiment, and hence are designated with 
20 the same reference numerals. 

[140] A main disk unit 1 130' includes a main main-volume 1300 and a main sub-volume 
1310. 

[141] In the main main- volume 1300, there is stored the data which has been transferred 
from the host computer 1010. The main sub-volume 1310 is used when copying the volume 
25 image of the main main- volume 1300 at a time point when the freeze instruction was issued. 
The blocks which the main main-volume 1300 and the main sub-volume 1310 have, 
respectively, show one-to-one correspondence. 

[142] The main DKC 1030' has a main bitmap A 1340, a main bitmap B 1350, and a main 
bitmap C 1360 all of which are contained in the RAM 1260. 
30 [143] The main bitmap A 1 340, when the contained bit is 1 , with respect to the block 
corresponding to that bit, shows that the contents of the data which is stored in the main 
main- volume 1300 are different from those of the data which is stored in the main sub- 
volume 1310. 
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[144] While the main bitmap B 1350 also shows the difference between the main main- 
volume 1300 and the main sub-volume 1310, only the bit corresponding to the block in which 
after the freeze instruction has been transmitted from the host computer 1010, the data is 
written to the main main-volume 1300 becomes 1. 
5 [145] The main bitmap C 1360 shows that there is the difference in the contents between the 
main sub-volume 1310 and a sub-main- volume 1320. 

[146] A sub-disk unit 1 160' includes the sub-main- volume 1320 and a sub-sub-volume 
1330. 

[147] To the sub-main- volume 1 320, there is written the data which has been transferred 
10 from the main DKC 1030\ In the sub-sub-volume 1330, there is built the volume image of 
the main main-volume 1300 at a time point when the freezing processing was executed last 
time. 

[148] A sub-DKC 1040* has a sub-bitmap A 1370 showing the difference between the sub- 
main- volume 1320 and the sub-sub-volume 1330. Then, the sub-bitmap A 1370 is contained 
15 in the RAM 1260. In the present embodiment, the sub-freezing mode 1090 is not used. 
[149] Figs. 13A to 13D are respectively schematic views showing the flow of the data 
corresponding to the present embodiment. 

[150] In Fig. 13 A, there is shown the flow of the data in the case where the host computer 
1010 does not issue the freeze instruction. 
20 [151] The data which has been transferred from the host computer 1010 is written to the 
main main- volume 1300 (indicated by an arrow J 190). 

[152] Then, it is assumed that in the sub-sub-volume 1330, there is stored the data of the 
volume image of the main main- volume 1300 at a time point when the host computer 1010 
issued the freeze instruction last time. 

25 [153] In Fig. 1 3B, there is shown the flow of the data for a time period ranging from a time 
point when a host computer 1010 has issued the freeze instruction up to a time point when the 
main storage apparatus system 1 180 generates, in the main sub-volume 1310, the copy of the 
volume image of the main main- volume 1300 at a time point when the main storage 
apparatus system 1 180 issued the freeze instruction. 

30 [154] The main disk unit 1 130 copies the data from the main main- volume 1300 to the main 
sub-volume 1310 (indicated by an arrow L 210), 

[155] While the data which the main DKC 1030' has received is written to the main main- 
volume 1300 (indicated by an arrow K 200), in the case of writing of the data to the block in 
which the copy to the main sub- volume 1310 is not yet carried out, after completion of the 
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processing of copying the data indicated by the arrow L 210, the data is written to the main 
main- volume 1300. 

[156] In Fig. 13C, there is shown the flow of the data for a time period ranging from a time 
point when the volume image of the main main-volume 1300 at a point when the host 
5 computer 1010 issued the freeze instruction has been generated in the main sub- volume 1310 
up to a time point when the volume image generated in the main sub-volume 1310 is 
generated in the sub-main-volume 1320 which the sub-DKC 1040' manages. 
[157] The data which has been transferred from the host computer 1010 is written to the 
main main- volume 1300 (indicated by the arrow M 220). The data of the main sub-volume 
10 1310 is read out to the main DKC 1030' to be transferred to the sub-DKC 1040' to be written 
to the sub-main-volume 1320 (indicated by the arrow N 230). 

[158] In Fig. 13D, there is shown the flow of the data for a time period ranging from a time 
point when the volume image of the main main-volume 1300 at a time point when the host 
computer 1010 issued the freeze instruction to the sub-main- volume 1320 has been generated 
15 up to a time point when the volume image thus generated is copied to the sub-sub-volume 
1330. 

[159] The data which has been transferred from the host computer 1010 is written to the 
main main- volume 1300 (indicated by an arrow O 240). 

[160] The sub-DKC 1040' controls the copy of the data from the sub-main-volume 1320 to 
20 the sub-sub- volume 1330 (indicated by an arrow P 250). 

[161] In the present embodiment, the copy of the data for duplicating the volume image of 
the main main- volume 1300 is carried out in such a way that of the data which is stored in the 
source volume and in the destination volume, only the differential data is subjected to the 
differential copy. 

25 [162] In Figs. 13 A, 13B and 13C, the sub-sub-volume 1330 holds the volume image of the 
main main-volume 1300 at a time point when the host computer 1010 issued the freeze 
instruction last time. 

[163] In Fig. 13D, the sub-main- volume 1320 holds the volume image of the main main- 
volume 1300 at a time point when the host computer 1010 has issued the freeze instruction 
30 this time. 

[164] Therefore, volume image of the main main-volume 1300 at a time point when the host 
computer 1010 issued the freeze instruction will be held in any case. 
[165] Fig. 14 is a schematic view useful in explaining the flow of the freeze instruction in 
the computer system 1000 of the present embodiment. In the figure, the vertical direction 
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represents the time base. Thus, it is meant that the time elapses as the position on the 
drawing is located more downwardly. 

[166] The host computer 1010 issues the freeze instruction to the main DKC 1030\ In 
response to the freeze instruction issued thereto, the main DKC 1030' differential-copies 
5 (hereinafter, the differential copy will be referred to as "the split", when applicable) all of the 
data, which is stored in the main main- volume 1300 at a time point when the freeze 
instruction was issued, to the main sub-volume 1310. After completion of the differential 
copy, the main DKC 1030* reads out the data of the main sub-volume 1310 to transmit the 
data thus read out to the sub-DKC 1040\ Then, the sub-DKC 1040' writes the data which has 

10 been received from the main DKC 1030' to the sub-main volume 1320. 

[167] The main DKC 1030' issues the freeze instruction to the sub-DKC 1040'. After 
having received the freeze instruction, the sub-DKC 1040' splits the volume image of the sub- 
main volume 1320 to the sub-sub-volume 1330. After completion of the split, the sub-DKC 
1040' transmits the report exhibiting the completion of the freezing to the main DKC 1030'. 

15 After having received this report, the main DKC 1030' informs the host computer 1010 of the 
completion of the freezing. 

[168] Fig. 15 is a flow chart useful in explaining a write processing A 3400 which the main 
DKC 1030' executes when the host computer 1010 transmits the data to the main storage 
apparatus system 1 1 80. 

20 [169] The main DKC 1030' receives the write data from the host computer 1010 (Step 3410) 
to judge whether or not the main freezing mode 1060 is in the ON state (Step 3420). 
[170] If it is determined in Step 3420 that the main freezing mode 1060 is in the ON state, 
then the main DKC 1030' judges whether or not the bit of the main bitmap A 1340 
corresponding to the block in which the transferred data is stored is 1 (Step 3430). 

25 [171] If it is determined in Step 3420 that the bit of the main bitmap A 1340 is zero, then the 
main DKC 1030' executes the processing in Step 3470. On the other hand, if it is determined 
in Step 3420 that the bit of the main bitmap A 1340 is 1, then the main DKC 1030' controls 
the main disk unit 1 130 in such a way as to copy the data stored in the block corresponding to 
the bit of 1 from the main main volume 1300 to the main sub-volume 1310 (Step 3440). 

30 [172] After completion of the copy, the main DKC 1030' sets to zero the corresponding bit 
of the main bitmap A 1340 (Step 3450) and also sets to 1 the corresponding bit of the main 
bitmap C 1360 (Step 3460). 

[173] The main DKC 1030' sets to 1 the bit of the main bitmap B 1350 corresponding to the 
block in which the transferred data is stored (Step 3470) to write the write data to the 
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corresponding block of the main main-volume 1300 to complete the write processing A 3400 
(Step 3480). 

[174] On the other hand, if it is determined in Step 3420 that the main freezing mode is in 
the OFF state, then the main DKC 1030' sets to 1 the corresponding bit of the main bitmap A 
5 to execute the processing in Step 3480 (Step 3490). 

[175] Fig. 16 is a flow chart useful in explaining the main freezing processing A 3600 
which the main DKC 1030' executes when the host computer 1010 has issued the freeze 
instruction to the main DKC 1030'. 

[176] After having received the freeze instruction from the host computer 1010 (Step 3610), 
10 the main DKC 1030' makes the ON state the main freezing mode (Step 3620) to judge 
whether or not all of the bits of the main bitmap A 1 1340 is zero (Step 3630). 
[177] If it is determined in Step 3630 that all of the bits of the main bitmap A 1340 are not 
zero, then the main DKC 1030' specifies the block in which the bit is 1 in the main bitmap A 
1340 (Step 3640). Then, the main DKC 1030' reads out the specified block of the main main 
1 5 volume 1300 to control the main disk 1 130* in such a way as to copy the block thus read out 
to the main sub-volume 1310 (Step 3650). 

[178] After completion of the copy of the specified block, the main DKC 1030' sets to zero 
the corresponding bit of the main bitmap A 1340 (Step 3660), while sets to 1 the 
corresponding bit of the main bitmap C 1360 to return back to the processing in Step 3630 
20 (Step 3670). 

[179] If it is determined in Step 3630 that all of the bits of the main bitmap A 1340 are zero, 
then the main DKC 1030' judges whether or not all of the bits of the bitmap C1360 are zero 
(Step 3680). 

[180] If it is determined in Step 3680 that all of the bits of the main bitmap CI 360 are not 
25 zero, then the main DKC 1030' selects the bit as 1 of the main bitmap C 1360 (Step 3690) to 
read out the block corresponding to the bit of the main sub-volume 1310 to transmit the block 
thus read out to the sub-DKC 1040' (Step 3700). 

[181] The main DKC 1030' sets to zero the corresponding bit of the main bitmap C 1360 to 
return back to the processing in Step 3680 (Step 3710). 
30 [182] On the other hand, if it is determined in Step 3680 that all of the bits of the main 
bitmap C 1360 are zero, then the main DKC 1030 1 issues the freeze instruction to the sub- 
DKC 1040' (Step 3720) to wait for the report exhibiting the freezing completion to be 
transmitted thereto from the sub-DKC 1040' (Step 3730). 
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[183] After having received the report exhibiting the completion of the freezing from the 
sub-DKC 1040' (Step 3740), the main DKC 1030' copies the contents of the main bitmap B 
1350 to the main bitmap A 1340 (Step 3750) to set to zero all of the bits of the main bitmap B 
1350 (Step 3760). The main DKC 1030' makes the OFF state the main freezing mode 1060 
5 (Step 3770) to transmit the report exhibiting the freezing completion to the host computer 
1010 to complete the main freezing processing A 3600 (Step 3780). 

[184] Fig. 17 is a flow chart useful in explaining the sub-remote copy processing A 3800 
which the sub-DKC 1040 executes when the processing of the remote copy is executed for 
the sub-DKC 1040 in Step 3700 of the main freezing processing A 3600. 
10 [185] After having received the data from the main DKC 1030* (Step 3810), the sub-DKC 
1040 controls the sub-disk unit 1 160 in such a way that the received data is written to the 
corresponding block of the sub-main-volume 1320 (Step 3820). 

[186] After the processing of writing the data has been completed, the sub-DKC 1040 sets 
to 1 the corresponding bit of the sub-bitmap A 1370 to complete the sub-remote copy 
1 5 processing A 3800 (Step 3830). 

[187] Fig. 18 is a flow chart useful in explaining a sub-freezing processing A 4000 which 
the sub-DKC 1040' executes when the main DKC 1030' has issued the freeze instruction to 
the sub-DKC 1040'. 

[188] The sub-DKC 1040' which has received the freeze instruction from the main DKC 
20 1030' judges whether or not all of the bits of the sub-bitmap A 1370 are zero (Step 4010). 
[189] If it is determined in Step 4010 that all of the bits of the sub-bitmap A 1370 are not 
zero, then the sub-DKC 1040' controls the sub-disk unit 1 160' in such a way that it selects the 
block of the sub-main- volume 1320 corresponding to the bit as 1 of the sub-bitmap A 1370 
(Step 4020) to read out the block thus selected to copy the block thus read out to the 
25 corresponding block of the sub-sub-volume 1330 (Step 4030). 

[190] After completion of the copy of the corresponding block, the sub-DKC 1040' sets to 
zero the corresponding bit of the sub-bitmap A 1370 to return back to the processing in Step 
4010 (Step 4040). 

[191] On the other hand, if it is determined in Step 4010 that all of the bits of the sub- 
30 bitmap A 1370 are zero, then the sub-DKC 1040' transmits the report exhibiting the 

completion of the freezing to the main DKC 1030' to complete the sub-freezing processing A 
4000 (Step 4050). 

[192] In the present embodiment, since the data of the volume image of the main main- 
volume 1300 at a time point when the host computer 1010 issued the freeze instruction last 
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time is stored in either the sub-sub-volume 1330 or the sub-main-volume 1320, the 
processing corresponding to the sub-recovery processing 3000 become unnecessary. 
[193] When the read request has been made from the host computer 1010, the processing(s) 
as in the first embodiment does(do) not need to be executed, and the data of the main main- 
5 volume 1 300 has only to be transferred. 

[194] Fig. 19 is a block diagram showing a configuration of a third embodiment of the 
computer system 1000 to which the present invention is applied. 

[195] In the present embodiment, a point that the remote copy is carried out only in Fig. 
13C of Figs. 13A to 13D and hence the network can not be used effectively in the second 
1 0 embodiment is improved. 

[196] The description will hereinafter be given with respect to only a point of difference 
from the second embodiment. 

[197] A main DKC 1030" has a main bitmap D 1380 which the RAM 1260 includes. 
[198] The main bitmap D 1380 shows the data which is not yet copied to the main sub- 
1 5 volume 1310 and which is stored in the main main- volume 1300, i.e., the block containing 
that data which was remote-copied to the sub-main-volume 1320 before issue of the freeze 
instruction. 

[199] A sub-DKC 1040" has a sub-bitmap B 1390. 

[200] The sub-bitmap B 1390 shows the block which is remote-copied from a main DKC 
20 1030" to the sub-main volume 1320 on and after the freeze instruction has been issued this 
time but before the freeze instruction will be issued next time. 

[201] In the present embodiment, the main freezing mode takes the integral number from 0 
to 3. The sub-freezing mode shows either ON or OFF. 

[202] Figs. 20 A to 20D are respectively schematic views showing the flow of the data in the 
25 computer system 1 000 of the present embodiment. 

[203] The description will hereinafter be given with respect to the present embodiment 

while comparing the present embodiment with Figs. 13A to 13D showing the flow of the data 

in the computer system 1000 to which the second embodiment is applied. 

[204] In Fig. 20A, the data which has been written from the host computer 1010 to the main 
30 main-volume 1300 is transferred to the sub-DKC 1040" before the host computer 1010 issues 

the freeze instruction (indicated by an arrow R 270). An arrow Q 260 corresponds to the 

arrow J 190 shown in Fig. 13 A. 

[205] An arrow S 280 and an arrow T 290 in Fig. 20B show the flow of the data 
corresponding to the arrow K 200 and the arrow L 210 in Fig. 13B, respectively. 
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[206] The data which has already been copied (indicated by the arrow T 290) to the main 
sub-volume 1310 but which is not yet sent to the sub-main- volume 1320 is transferred from 
the corresponding block of the main sub-volume 1310 to the sub-DKC 1040" through the 
main DKC 1030" to be written to the sub-main- volume 1320 (indicated by an arrow K 300). 
5 [207] An arrow V 310 and an arrow W 320 shown in Fig. 20C correspond to the arrow M 
220 and the arrow N 230 shown in Fig. 13C, respectively. 

[208] An arrow X 330 and an arrow Z 350 shown in Fig. 20D correspond to the arrow O 
and the arrow P shown in Fig. 13, respectively. 

[209] The data which has been newly written to the main main- volume 1300 (indicated by 
10 the arrow X 330) is copied to the sub-main- volume 1320 (indicated by an arrow Y 340) 
before the host computer 1010 issues the next freeze instruction. 

[210] In the case where the data for the block which is not yet copied from the sub-main- 
volume 1320 to the sub-sub-volume 1300 has been received from the main DKC 1030" by 
the sub-DKC 1040", the sub-DKC 1040" copies the data in the block corresponding to the 
15 data which has been received once from the sub-main-volume 1320 to the sub-sub-volume 
1330 (indicated by the arrow Z 350). Thereafter, the sub-DKC 1040" controls the sub-disk 
unit 1 160' in such a way that the data is written to the corresponding block of the sub-main- 
volume 1320. 

[211] Fig. 21 is a schematic view useful in explaining the flow of the freeze instruction in 
20 the computer system 1000 to which the present embodiment is applied. In the figure, the 
vertical direction represents the time base, and hence the time elapses as the position on the 
drawing is located more downwardly. 

[212] Comparing Fig. 21 with Fig. 14, it is understood that a point of difference is that the 
remote copy is carried out for a longer time period. 
25 [213] Fig. 22 is a flow chart useful in explaining a write processing B 4200 which the main 
DKC 1030" executes when the data has been transferred from the host computer 1010 to the 
main storage apparatus system 1 180. 

[214] The main DKC 1030" receives the write data from the host computer 1010 (Step 
4210) to judge whether or not the main freezing mode 1060 is zero (Step 4220). If it is 
30 determined in Step 4220 that the main freezing mode 1060 is not zero, then the main DKC 
1030" judges whether or not the main freezing mode 1060 is 1 (Step 4230). 
[215] If it is determined in Step 4230 that the main freezing mode 1060 is not 1, then the 
main DKC 1030" judges whether or not the main freezing mode 1060 is 2 (Step 4240). 
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[216] If it is determined in Step 4240 that the main freezing mode 1060 is 2, then the main 
DKC 1030" executes the processing in Step 4260. On the other hand, if it is determined in 
Step 4240 that the freezing mode 1060 is not 2 (i.e., it is determined to be 3), then the main 
DKC 1030" sets to zero the bit of the main bitmap D 1380 corresponding to the transferred 
5 block (Step 4250). 

[217] The main DKC 1030" sets to 1 the bit corresponding to the write data of the main 
bitmap A 1340 (Step 4260) and controls the main disk unit 1 130" in such a way that the write 
data is stored in the corresponding block of the main main-volume 1300 to complete the main 
write processing B 4200 (Step 4270). 
10 [218] On the other hand, if it is determined in Step 4220 that the main freezing mode 1 060 
is zero, then the main DKC 1030" sets to zero the corresponding bit of the main bitmap C 
1380 to execute the processing in Step 4250 (Step 4280). 

[219] In addition, if it is determined in Step 4230 that the main freezing mode 1060 is 1, 
then the main DKC 1030" judges whether or not the corresponding bit of the main bitmap A 

15 1340 is 1 (Step 4290). If it is determined in Step 4290 that the corresponding bit is zero, then 
the main DKC 1030" executes the processing in Step 4330. On the other hand, if it is 
determined in Step 4290 that the corresponding bit is 1, then the main DKC 1030" controls 
the main disk unit 1 160' in such a way that the data of the block of the main main- volume 
1300 corresponding to the bit of interest is copied to the corresponding block of the main sub- 

20 volume 1310 (Step 4300). 

[220] The main DKC 1030" sets to zero the bit of the main bitmap A 1340 corresponding to 
the copied data (Step 4310). The main DKC 1030" sets to 1 the bit of the main bitmap C 
1360 corresponding to the copied data (Step 4320). In addition, the main DKC 1030" sets to 
1 the bit of the main bitmap B 1350 corresponding to the copied data (Step 4330) to return 

25 back to the processing in Step 4270. 

[221] Fig. 23 is a flow chart useful in explaining a main freezing processing B 4400 which 
the main DKC 1030" executes when the host computer 1010 has issued the freeze instruction 
to the main DKC 1030". 

[222] After having received the freeze instruction from the host computer 1010 (Step 4410), 
30 the main DKC 1030" sets to 1 the main freezing mode 1060 to complete the main freezing 
processing B 4400 (Step 4420). 

[223] Fig. 24 is a flow chart useful in explaining a main copy processing 4600 which is 
activated by the main DKC 1030" at the time when turning ON the power source of the main 
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storage apparatus system 1 180, and thereafter the main DKC 1030" continues to execute as 
one task. 

[224] The main DKC 1030" judges whether or not the main freezing mode 1060 is 1 (Step 
4610). If it is determined in Step 4610 that the main freezing mode 1060 is 1, then the main 
5 DKC 1030" judges whether or not the bit of 1 is present in the bits contained in the main 
bitmap A 1340 (Step 4620). 

[225] If it is determined in Step 4610 that the bit of 1 is present in the bits contained in the 
main bitmap A 1340, then the main DKC 1030" controls the main disk unit 1 130" in such a 
way that the block corresponding to the bit of interest is selected (Step 4630), and the data of 
10 the block corresponding to the bit of the main main volume 1300 thus selected is copied to 
the corresponding block of the main sub-volume 1310 (Step 4640). 

[226] After completion of the copy, the main DKC 1030" sets to zero the corresponding bit 
of the main bitmap A 1340 (Step 4650), while sets to 1 the corresponding bit of the main 
bitmap C 1360 to return back to the processing in Step 4620 (Step 4660). 

1 5 [227] On the other hand, if it is determined in Step 461 0 that the main freezing mode is not 
1, then the main DKC 1030" executes the processing in Step 4680. 
[228] In addition, if it is determined in Step 4620 that the bit of 1 is absent in the main 
bitmap A 1340, then the main DKC 1030" sets to 2 the main freezing mode 1060 (Step 
4670), and carries out waiting for some time to return back to the processing in Step 4610 

20 (Step 4680). 

[229] Fig. 25 is a flow chart useful in explaining a main remote copy processing 4800 which 
is activated by the main DKC 1030" at the time when turning ON the power source of the 
main source apparatus system and which the main DKC 1030" executes as one task. 
[230] The main DKC 1030" judges whether the main freezing mode 1060 is zero or 3 (Step 
25 4810). If it is determined in Step 4810 that the main freezing mode 1060 is zero or 3, then 
the main DKC 1030" judges whether or not the block in which the bit of the main bitmap A 
1340 is 1 is present (Step 4820). If so, the main DKC 1030" selects the block of interest 
(Step 4830). 

[231] The main DKC 1030" sets to 1 the bit of the main bitmap D 1380 corresponding to 
30 the selected block (Step 4840) to read out the corresponding block from the main main- 
volume 1300 to transmit the block thus read out to the sub-DKC 1040" (Step 4850). 
[232] The main DKC 1030" receives the report exhibiting the reception of the data from the 
sub-DKC 1040" to return back to the processing in Step 4810 (Step 4860). 
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[233] On the other hand, if it is determined in Step 4820 that the block in which the bit of 
the main bitmap A 1340 is 1 is absent, then the main DKC 1030" carries out step of waiting 
for some time (for about several milliseconds) to return back to the processing in Step 4810 
(Step 4870). 

5 [234] In addition, if it is determined in Step 4810 that the main freezing mode 1060 is 
neither zero nor 3, then the main DKC 1030" judges whether or not the block is present in 
which the main bitmap C 1360 is 1 and also the main bitmap D 1380 is zero (Step 4880). 
[235] If it is determined in Step 4880 that the block fulfilling the above-mentioned 
conditions is present, then the main DKC 1030" selects the block of interest (Step 4890) to 
10 set to zero the corresponding bit of the main bitmap C 1360 (Step 4900). The main DKC 

1030" reads out the block thus selected from the main sub-volume 1310 to transfer the block 
thus read out to the sub-DKC 1040" (Step 4910). 

[236] The main DKC 1030" receives the report exhibiting the reception of the data from the 
sub-DKC 1040" to return back to the processing in Step 4810 (Step 4920). 

1 5 [237] On the other hand, if it is determined in Step 4880 that the block is not present in 
which the main bitmap C 1360 is 1 and also the main bitmap D 1380 is zero, then the main 
DKC 1030" judges whether or not the main freezing mode 1060 is 2 (Step 4930). 
[238] If it is determined in Step 4930 that the main freezing mode 1060 is 2, then the main 
DKC 1030" clears all of the bits in the main bitmap D 1380 to zero (Step 4940), and sets to 3 

20 the main freezing mode 1060 (Step 4950) and then issues the freeze instruction to the sub- 
DKC 1040" to return back to the processing in Step 4810 (Step 4960). 
[239] On the other hand, if it is determined in Step 4930 that the main freezing mode 1060 
is not 2, then the main DKC 1030" carried out the step of waiting for some time (for about 
several milliseconds) to return back to the processing in Step 4810 (Step 4970). 

25 [240] Fig. 26 is a flow chart useful in explaining a main freezing completion processing 
5000 which the main DKC 1030" executes at the time when having received the report 
exhibiting the completion of the freezing from the sub-DKC 1040". 
[241] After having received the report exhibiting the freezing completion from the sub- 
DKC 1040" (Step 5010), the main DKC 1030" sets to zero the main freezing mode 1060 

30 (Step 5020) and informs the host computer 1010 of the freezing completion to complete the 
main freezing completion processing 5000 (Step 5030). 

[242] Fig. 27 is a flow chart useful in explaining a sub-freezing processing 5200 which the 
sub-DKC 1040" executes at the time when the main DKC 1030" has issued the freeze 
instruction to the sub-DKC 1040". 



[243] After having received the freeze instruction from the main DKC 1030" (Step 5210), 
the sub-DKC 1040" makes the ON state the sub-freezing mode 1090 (Step 5220) to judge 
whether or not the bit of 1 is present in the sub-bitmap A 1370 (Step 5230). 
[244] If it is determined in Step 5230 that the bit of 1 is present in the sub-bitmap A 1370, 
5 then the sub-DKC 1040" controls the sub-disk unit 1 160' in such a way that the block 

corresponding to the bit of interest is selected (Step 5240), and the block thus selected of the 
sub-main-volume 1320 is read out to be copied to the corresponding block of the sub-sub- 
volume 1330 (Step 5250). 

[245] The sub-DKC 1040" sets to zero the corresponding bit of the sub-bitmap A 1370 to 

10 return back to processing in Step 5230 (Step 5260). 

[246] On the other hand, if it is determined in Step 5230 that the bit of 1 is absent in the 
sub-bitmap A 1370, then the sub-DKC 1040" copies the sub-bitmap B 1390 to the sub-bitmap 
A 1370 (Step 5270) to make all of the bits of the sub-bitmap B 1390 to zero (Step 5280). 
[247] The sub-DKC 1040" makes the OFF state the sub-freezing mode 1090 (Step 5290) 

15 and informs the main DKC 1040" of the freezing completion to complete the sub-freezing 
processing 5200 (Step 5300). 

[248] Fig. 28 is a flow chart useful in explaining a sub-remote copy processing B 5400 
which the sub-DKC 1040" executes at the time when in Step 4910 in the main remote copy 
processing B 4800, the main DKC 1030" remote-copies the data to the sub-DKC 1040". 

20 [249] After having received the data from the main DKC 1030" (Step 5410), the sub-DKC 
1040" informs the main DKC 1030" of the reception of the data (Step 5420). 
[250] Thereafter, the sub-DKC 1040" judges whether or not the sub-freezing mode 1090 is 
in the ON state (Step 5430). If it is determined in Step 5430 that the sub-freezing mode 1090 
is in the ON state, then the sub-DKC 1040" judges whether or not that the bit of 1 is present 

25 in the sub-bitmap A 1370 (Step 5440). If it is determined in Step 5440 that the bit of 1 is 
absent in the sub-bitmap A 1370, then the sub-DKC 1040" executes the processing in Step 
5470. 

[251] On the other hand, if it is determined in Step 5440 that the bit of 1 is present in the 
sub-bitmap A 1370, then the sub-DKC 1040" controls the sub-disk unit 1 160" in such a way 
30 that the block of the sub-main-volume 1320 corresponding to the bit of 1 is read out to be 
copied to the corresponding block of the sub-sub-volume 1330 (Step 5450). 
[252] The sub-DKC 1040" sets to zero the corresponding bit of the sub-bitmap A 1370 
(Step 5460), while sets to 1 the corresponding bit of the sub-bitmap B 1390 (Step 5470). The 
sub-DKC 1040" controls the sub-disk unit 1 160* in such a way that the received data is 
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written to the sub-main volume 1320 to complete the sub-remote copy processing B 5400 
(Step 5480). 

[253] On the other hand, if it is determined in Step 5430 that the sub-freezing mode 1090 is 
in the OFF state, then the sub-DKC 1040" makes 1 the corresponding bit of the sub-bitmap A 
5 1370 to execute the processing in Step 5480 (Step 5490). 

[254] In the present embodiment, since the volume image of the main main-volume 1300 at 
a time point when the host computer 1010 issued the freeze instruction last time is held in the 
form of the data stored in the sub-sub-volume 1330 or in the form of the combination of the 
data which is stored in the sub-sub-volume 1330 and the sub-main- volume 1320, the 
10 processing corresponding to the sub-recovery processing 3000 becomes unnecessary. 

[255] When the request to read the data has been made from the host computer 1010, the 
data of the main main- volume 1300 may be transferred thereto. 

[256] Next, a fourth embodiment of the present invention will hereinafter be described. 
[257] A point of difference of the fourth embodiment from other embodiments is that the 
15 data which is transferred from the main storage apparatus system 1 130 to the sub-storage 
apparatus system 1 1 60 is encrypted. 

[258] The fourth embodiment will now be described on the basis of the second embodiment. 

But, it goes without saying that in the first embodiment and the third embodiment as well, the 

present embodiment can be adopted. 
20 [259] In the present embodiment, when the data is transferred from the main main-volume 

1300 to the main sub-volume 1310, the data to be transferred is encrypted (encoded). 

[260] In addition, the encrypted data is transferred from the main sub- volume 1310 to the 

sub-main-volume 1320, and when the encrypted data is copied from the sub-main-volume 

1320 to the sub-sub-volume 1330, the data of interest is decoded. 
25 [261] As a result, the encrypted data will be transferred on the network 1050. The 

description will hereinbelow be given with respect to a point of difference from the second 

embodiment. 

[262] In the present embodiment, in Fig. 13B, the data is copied from the main main- 
volume 1300 to the main sub-volume 1310 while the data is encrypted (encoded) (indicated 
30 by an arrow L 210). 

[263] In addition, in Fig. 13D, in the sub-DKC 1040', the data is copied from the sub-main- 
volume 1320 to the sub-sub- volume 1330 while the encrypted data is decoded (indicated by 
an arrow P 250). 
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[264] In Fig. 14, the stored data is encrypted when the main DKC 1030' is split. In addition, 
when the sub-DKC 1040' is split, the stored data which is already encrypted is decoded. 
[265] In Step 3440 shown in Fig. 15, the main DKC 1030' copies the data stored in the 
corresponding block from the main main- volume 1300 to the main sub-volume 1310 after the 
encryption of the data of interest. 

[266] In Step 3650 shown in Fig. 16, the main DKC 1030' controls the main disk unit 1 130' 
in such a way that the corresponding block of the main main- volume 1300 is read out to be 
encrypted, and the encrypted data is copied to the main sub-volume 1310. 
[267] In Step 4030 shown in Fig. 18, the sub-DKC 1040' controls the sub-disk unit 1 160' in 
such a way that the corresponding block of the sub-main- volume 1320 is read out to the sub- 
DKC 1040' and the encrypted data is decoded to be copied to the corresponding block of the 
sub-sub-volume 1330. 

[268] By adopting the configuration of the present embodiment, the volume image in the 
freezing can be ensured in any one of the disk units while ensuring the safety of the data 
which is being transferred. 

[269] By adopting the configuration of the present invention, even when the remote copy of 
no guarantee to order is carried out, the volume image having excellent coherency can be 
ensured. 

[270] While the present invention has been particularly shown and described with reference 
to the preferred embodiments, it will be understood that the various changes and 
modifications will occur to those skilled in the art without departing from the scope and true 
spirit of the invention. The scope of the invention is therefor to be determined solely by the 
appended claims. 
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